[INSERT i. LASMFK CHOX/CONTROL MARKINGS, 

IF APPROPRIATE! 

Confidentiality:_Low_Moderate_High_Undefined 

Integrity: _Low Moderate High Undefined 

Availability: _Low Moderate High Undefined 

_Not applicable - this system is only paper-based. 

10. Is this system/project the subject of an OMB-300 budget submission? 

X NO 

_YES If yes, please provide the date and name or 

title of the OMB submission: 

11. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007. P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

X NO 

_YES If yes, please describe the data mining function: 

12. Is this a national security system (as determined by the SecD)? 

X NO _YES 

13. Status of System/ Project: 

_ This is a new system/ project in development. [If you cheeked this block, 

STOP. The PTA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required.] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? MP2 Is a COTS databasef 


2. Has the system/project undergone any significant changes since April 17, 2003? 


>N/€ONTR€ 

DPR1ATE} 
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[INSERT!. LASMFK VnOT/CONTROL MARKINGS, 
IP APPROPRIATE] 


NO [If no, proceed to next question (II.3).] 


X YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_xx_Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. The system will be 
rehosted on VIDAR, a hosting environment for collaborative tools and 
applications. 

_ Other [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

X NO_YES 


NSPKCn l \8 mPR XOO\ OMKO) 
IF APPROPRIATE] 
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[INSERT i. LASMFK CHOX/CONTROL MARKINGS, 

IF appropriate! 


If yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

_NO _YES 

[The PTA is now complete and after division approval(s) should he submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 


>WCONTRG 

DPRIAT'Ej 
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FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
FOI/PA# 1272295-0 

Total Deleted Page(s) = 1 
Page 4 ~ b3; b7E; 


XXXXXXXXXXXXXXXXXXXXXXXX 
X Deleted Page(s) X 
X No Duplication Fee X 
X For this Page X 
XXXXXXXXXXXXXXXXXXXXXXXX 
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(OGC/PCLU Rev. 08/16/2010) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

I-1 b3 

NAME OF SYSTEM / PROJECT:_ b7E 

BIKR FBI Unique Asset ID: 2009-047-01-P-115-045-3411 _ 


SYSTEM/PROJECT POC 

ALTERNATE POC 

FBI OGC/PCLU POC 

Name: Theresa Fretz 

Name| j 

Name: 



Program Office: ITB 

Program Office: CID 

Phone 



Division: ITSD 

Division: CID 

Room Number: JEH, Rm 7350 

Phone: 202-324-8447 

Phone :| I 



Room Number: 8977 

Room Number: 3320 




FBI DIVISION INTERMEDIATE APPROVALS 


Program Division: 
Criminal Investigative 
Division 


Program Manager (or ather appropriate 

executiv^a CBivisioh datermines)_ 

Signature: 

Date si gne d^ - 

Name: | | 

Title: Unit Chief 


FBIHQ Division: 
Criminal Investigative 
Division 


Signature_ 

Date signed: a /**/'' W 
Name l I 

Title: Assistant Section Chief 


Division Privacy Officer 


Signature^ f 

Date s igned :NS/_g^y / / / 

Name: | | 

Title: Special Assistant to the Assistant 
Director |-^- a - 1 


Signature: \ _|- 

Date s igned: j ^ / / / / 

Name l I 

Title: Special Assistant to the Assistant 

Director 


b6 

b7C 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7350). 

(The FBI Privacy and Civil Liberties Officer’s determinations, conditions, and/or final approval will be recorded on the 
following page.) 


UNCLASSIFIED//FOR OF 
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UNCLASSIFIED//FOR2EEie*Afe«SIZaNL^ 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


_PIA is required by the E-Govemment Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No: 

X PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

X Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

X Other: This PTA is exceptionally granular in order to provide information and analysis similar to a PIA, 
which would normally have been conducted if the information in this system was true/accurate, and not 
solely for backstopping purposes. 


Applicable SORN(s): Central Records System. FBI-002 _____ 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No X Yes-See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCivil%20Liberties%20Library/form_for_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required? X N o Yes : 

Prepare/revise/add Privacy Act (eX3) statements for related forms? _No _Yes : 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 

as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessaiy updates. _ 

Other: 


Privacy and Civil Liberties Unit _ 

James J. Landon, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: 
Date Signed 


Signature: 
Date Signed 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 


1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 

“ b3 

b7E 
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UNCLASSIFIED/TOR2EESe*Afei!SE5S2 


3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

X The information directly identifies specific individuals. 

_ The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

X The information can be used to distinguish or trace an individual’s identity (i.e., it 
is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

_ None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 


_NO 

X YES The system is designed to pertain predominately to government 
employees, contractors, or consultants. It would be a very rare 
instance that it would contain information relating to Confidential 
Human Sources. 

5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. [If no, skip to question 7.] 

X YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_NO [If no, proceed to question 7.] 

_ X YES I 
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a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


_NO 

X YES [If yes, proceed to question 7.] 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

_NO X YES If yes, check all that apply: 

_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 

X SSNs are necessary to identify FBI personnel in this internal 
administrative system. 

_SSNs are important for other reasons. Describe: 

X The system/project provides special protection to SSNs (e.g., SSNs are 
encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: SSNs are masked so that only the last four digits are 
displayed to the general users. The only personnel with the ability to view the 
full SSNs are a limited number of administrators. 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

_X_No. 
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UNCLASSIFIED//FOR 


_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date. 

X YES If yes, please indicate the following, if known: 

Provide date of last C&A certiflcation/re-certification: I 


Confidentiality:_Low_Moderate X High_Undefined 

Integrity: _Low Moderate X High Undefined 

Availability: _Low Moderate X High Undefined 

_Not applicable - this system is only paper-based. 

10. Is this system/project the subject of an OMB-300 budget submission? 

X NO 

_YES If yes, please provide the date and name or 

title of the OMB submission: 

11. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

X NO 

_YES If yes, please describe the data mining function: 

12. Is this a national security system (as determined by the SecD)? 


UN CL AS SIFIED//F0R~0FF|€IAL4iSE30NEY 


epic.org 


14-06-04-FBI-R5T/V20150318-4th-Production 


EPIC-902 



UNCLASSIFIED//FOROE 


_NO X YES 

13. Status of System/ Proj ect: 

X This is a new system/ project in development. 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17, 2003? 
_ NO [If no, proceed to next question (II.3).] 


YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system. 

_A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_A change that results in new items of information in identifiable 

form being added into the system/project. 
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UNCLASSIFIED//FOR 


_ Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PI A for this system/project already exist? 

_NO _YES 


If yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

NO _YES 
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(OGC/PCLU ( Rev. 04/01/20! I) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT: The National Crime Information Center (NC1C) National Instant Criminal 
Background Check System (NIGS) Denied Transaction File (DTF) 

BIKR FBI Unique Asset ID: .. . 

b6 
b7C 


I Derived From; 
CWW By; 

eitwM? Omt 


SYST EM/PROJECT PQC 

Name;___ 

Program Office: LES Section/NCIC 
Operations and Policy Unit 

Divisio n: CJ1S _ 

Phone: I I 

Room Number: D3-7I6 _ 


FBI OGC/PCLU POC 
Name: |" 

} 

I 


Room Number: C3-655 


FBI DIVISION INTERM EDIATE APPROVALS 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

Signature: s . 

Signature:! 

Date signed: TjVoNosv-"" 

Date signed: 9 / Ft/ £.«'-<' £» 


Name: Michelle S. Klimt 

Name: 1 1 


Title: Chief. LES Section 

Title: Supervisory Security Specialist 

FBIHQ Division: 

Signature; 

| Signature: 


Date signed; 

Date signed: 


Name: 

Name; 


Title: 

Title: 
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FINAL F BI APPROVAL / DETERMINATIONS / CONDITIONS: 


_ PJA is to be completed as a matter of F8I/DOJ discretion. 

Is PIA to be published on FB1.GOV (after any HMD F01A redactions)? _Yes. _No 

_PIA is not required for the following reason(s): 

___ System does not collect, maintain, or disseminate Pit. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_information in the system relates to internal government operations. 

System has been previously assessed under an evaluation similar to a PIA. 

No significant privacy issues (or privacy issues are unchanged). 

Other: 


Applicable SORN(s): „NCIC andNICS SORNs_ 


Notify FBI RMD/R.TDS per MIOG 190.2.3?_No _Yes-See sample EC on PCLU intranet website here: 

http://home/DO/OGC/l.TB/PCLU/PrivabyCivil%20Liberties%20Library/form..for_mtog190--2-3...ec.vvpd 

SORN/SGRN revisions) required? _No X Yes 


Prepare, revise/add Privacy Act (e)(3) statements for related forms? 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, i n any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 

as well as on comp lia nce with requirements for Electronic Recordkeeping Certification and any necessary- updates.. ._ 

Other: 


d 


^Elizabeth WithnelL Unit Chief 
Privacy and Civil liberties Unit 


i.lwmjy'Trrahrton. l^mtyqicnerai Counsel 
If F B I Privacy and Civil L iberties Officer 


Signature: 

Date Signed: _ 

Signature: \ 

Date Signed: 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 


1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information In the 
system/project; (!) and the manner of transmission to all users. 

The National Crime Information Center (NCIC) is a computerized information 
system containing documented criminal justice information that is accessed by name and 
other descriptive data. The FBI established the NCIC system in 1967 as a service to 
facilitate the shanng of law enforcement information, and participation now encompasses 
criminal and noncriminal justice agencies located in the 50 states, the District of 


Columbia, United States territories and possessions, and select foreign countries, NCIC 



b7E 

The NCIC contains a variety of files of interest to law enforcement, including 
wanted persons, registered sex offenders, gang members, and missing persons. The 

NCIC has specific requirements for which agencies may enter records into a file, the 
necessary data elements for each record, and which aaeneies mav access the file. These 
requirements varv based on the nature of the NCIC file. | j 

1_1 

1 I Access to NCIC files is strictly 


controlled and audited by both the FBI and the state agencies. 

The National Instant Criminal Background Check System (NICS) is a national 
name check system that is designed to immediately determine if a person Is disqualified 
from receiving or possessing firearms. A person may be disqualified based on one of 
several federal statutory prohibitors (e.g. a felony conviction, a fugitive from justice, or \ 
misdemeanor crime of domestic violence) or based bn various state prohibitors. The 
NICS queries available records in authorized FBI information s>stems! 

a 

b7E 



The purpose of this Privacy 'fhreshold Analysis (PTA) is to describe a new NCIC 
file, the NICS Denied Transaction Pale (DTP). This file will make specific information, 
relating to individuals who have been denied a firearm pursuant to a NICS check 
available to local state, tribal and federal criminal justice agencies for law enforcement 
purposes. The DTP will serve to warn law enforcement of indh iduais who have 11 legally 
attempted to obtain firearms and provide valuable lead information regarding the location 
of fugitives and identities of those subject to protection orders. The DTP will include 
biographic information such as name, date of birth, place of birth, and country of 
citizenship, as well as social security numbers, and other miscellaneous identification 
numbers related to the individual In addition, transaction information such as the date of 
the NICS denial, state of purchase, and state of residency will be included in the record. 
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2. Does the system/project collect, maintain, or disseminate any information about 
individuals (he., a human being or natural person, regardless of nationality}? 

_NO 

X YES (If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

X The information directly identifies specific individuals. 
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__ The information is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

X The information can be used to distinguish or trace an individual’s identity (i.e., it 
is linked or linkable to specific individuals). 

It'you marked any of the above, proceed to Question 4. 

None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly. 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

X NO __ YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO, [If no, skip to question 7,] 

X _YES. [If yes, proceed to the next question.] 

6, Does the system/project collect any information directly from the person who is the 
subject of the information? 

_X NO [If no, proceed to question 7.] 

_YES 

a. Does the system/project support criminal, CT, or FC1 investigations or 
assessments? 

_NO 

_____ YES [If yes, proceed to question 7,] 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either- on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCI.!! to develop/implement 

the necessary form(s).j 

YES Identify' any forms, paper or electronic, used to request such 
information from the information subject: 
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?. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

NO X YES If yes, check all that apply: SSNs are not 
mandatory fields for NCIC files and a search cannot be initiated solely by SSN; however, 
when a SSN is included in an NCIC inquiry, a search will be performed based on that 
SSN. 


__ SSNs are necessary to establish/confirm the identity of subjects, victims, 
witnesses or sources in this Saw enforcement or intelligence activity. 

_ SSNs are necessary to identify FBI personnel in this internal administrative 
system. 

_X_ SSNs are important for other reasons. Describe: Assistance with the 

identification of persons for criminal justice purposes. 

_The system/project provides special protection to SSNs (e.g.. SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

It is not feasible for the system/project to provide special protection to SSNs. 
Explain: 

t. Is the system operated by a contractor? 

X No. 

Yes. Information systems operated by contractors for the FBI may be 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PI! and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9 . Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (Serf))? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

X YES If yes, please indicate the following, if known: 


epic.org 


14-06-04-FBI-FOIA-20150318-4th-Production 


EPIC-910 









Provide date of last C&A certification/re-eertiflcation: 
Confidentiality:^ Low X Moderate_ High ^Undefined 

Integrity: _Low Moderate XJ'Kgh Undefined 

Availability: _Low Moderate XHigb Undefined 

Not applicable - this system is only paper-based. 

1 0. Does the system conduct data mining as defined in Section 804 of the 
implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 1 ID- 
53 (codified at 42 USC 200Gee-3)? 

X NO 

YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

X NO _YES: 

12. Status of System/ Project: 

X This is a new system/ project in development. 

II. EXISTING SYSTEMS/PROJECTS 

1. When was the system/project developed? 

2. Has the system/projeet undergone any significant changes since April 1 7 , 2003? 

_NO [if no, proceed to next question (1,1.3).] 

_YES If yes, indicate which of the following changes were involved (mark all 

changes that apply, and provide brief explanation for each marked change): 

___ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

A new use of an O' system/project, including application of a new 
technology, that changes bow information in identifiable form is managed. 
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(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

A change that results in information in identifiable form being 
merged, centralized, or matched with other databases, 

A new method of authenticating the use of and access to 
information in identifiable form by members of the public, 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

__ A new interagency use or shared agency function that results in 
new' uses or exchanges of information in identifiable form. 

__ A change that results in a new use or disclosure, of information in 
identifiable form. 

_ A change that results in new items of information in identifiable 
form being added into the system/project. 

_ Changes do not in volve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project, 

.. Other [Provide brief explanation): 

3. Does a PI A for this system/project already exist? 

__ NO _YES 

If yes: 

a. Provide date/title of the PSA: 

b. Has the system/project undergone any significant changes since the PI A? 

NO _YES 
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Is PI A So bo piddDbed os; FBbGOV (ad or any RMD FOIA icdaetsonsf: ....... Vos. .No (indicate Ktxm): 

.A... Bb\ is nos axgnred for the following rensooyo 

System dors nos CoMe:., snnio'hdm os shsse;insiate PH 

System is graiKbaShercd • in eswicncc before 4/17/2003; ;k; later change;. posing sigidhean:. privacy risks}. 

.Isdormorioss in she syssesn re;ales so Oriental government opes.shoiis. 

System lias been previously assessed cede; nn eve ices ion simbar to a PI A, 

_ No Cgrrdkuvnt privacy issues. (or privtscy issues are nnebaegedk 
XOshcs'sdeseiibe}: ikp XOsi ;.,sX Ay j&HazJL h sXMuJj A^^J 0>$*r 
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David C Larsen, Deputy Cenork Cousod 
FBI Privacy arid Civ); Liberties Officer 
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iVdlfort il NUJMNDA 

If AfFMOPkiATF.I 

I, !\!OfAUH‘A \nm \ im iwmki 

J. Provide a general de$criptlou of the system or project that mdudcm name of 
the system/profeeC tnd'mling associated acronyms; structure of the 
system/project, purpose; nature of the mforamtirm m the system m4 tew if 
will be used; who will hove access: to the inform atma m the system and the 
manner of transmission to all users. 

Foe Motional C nmc Information Center (NQC) is a computerised information 
system containing documented criminal justice information that is accessed by name and 
other descriptive data.. The FBI established the NCiC system in tbe? as a service to 
be: I Tate the sharing of lav enforcement Inform attorn and participation now encompasses 
criminal and noneommai jnstice agencies located to the 50 states* the District of 
- x x * _ v Q\ \ - \ * - e\ O'- N, v s 



1 

b7E 

I The FBI has Is 

sura a Fnvacs Act system o:l 



records notice ISOR.N) for the NCiC (it Tl'ICiTFBt-dhl l «>* h R TiCiT: 66 Fill. is is 5 5 F, 


The NCiC is managed and maintained by the FBI's Criminal Jnstice mfwmaben 
Services (Old} Division. The NCIC con tains a variety of tiles of interest to law 
enforcement., including the 'Wanted Person Flic (WPF), one oCNClCN 12 Nmrsotf' Pics 
s v ' » - ' * ' - * ten >■ pi ^ 

c memo! warrants arc outstanding;, Including warrants tor juvenile offenders and 
temporary warrants. The NCIC records are a on ni bn ted by participating criminal justice 
agencies. Agencies that enter records me responsible tor the accu.ra.cy, loneliness, and 
completeness of those records. The information, entered needs to be as complete and 
accurate as possible to best identify suspects and to eliminate non-suspects. Cartendy, 
law enforcement personnel enter the name, date of birth, and physical descriptive 
information snob as race, sex, and age for each wanted person, as well as miscellaneous 
u urn bets (to include social security numbers) that, may assist in accurate foowmicsTonr. 
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I i NS BB T CL AES i Ft€ AT TON/CONI KOI. M A UK l A OS, 

iv \BEBObki\riq 

5. A;? Social Seeoruy Numbers (SSNs) collected, maintained nr disseminated hoot the 
systenvprqleaT 

ISO .X YES 0 yes., ehcrk ail that, apply: 


X SSNs are neceasars to astabbsh.Yen.hrra the denary of subjects, victims, 
witnesses c>r sources i.n ids law enforcement or nnclhgeucc activity; 


__SSNs mo necessary to Identify V Bl personnel In has internal td.tt:.nnsitadve 

ay sierra 

\ ^ „ \'U a a Y 

oden aaed as dent:tiers tor driver licenses., they are odea requested/accessed by 
lew enforcement per sowed to confirm Ideditles, 

."Ore system/proda provide* special protection to SSNs beg., SSNs arc 

encrypted, hidden b orn ab nners via a look-up table, or only available to certain 
■users). 0 esc HI.hu 

.X. It Is not feasible tor the systenEproject to provide special protection to 

SSNs, Explain: Maa.ki.np SSNs iron; law ealhreenient avodd be 
dernmeotd to the I dent Hi cation of wanted persona. Although SSNs 
may be entered into die WPS by law enforcement personnel as an 
optional held. 


6. Does the syatcrn/pivr;cci collect any information directly from the person who Is the 
an bl ee t o f the I n format I o rt 7 

.X. NO [If no. proceed to question ?.] The information may be taken 

directly ben.: the subject by the state or local law enfbrcemem personnel, who then scad 
the records to the NCIC. 

YES 


a. Does the system ysojeof support coon rid. C I. or fCi investigations or 
assess merge? 

YES [If yes, proceed to question 7 1 
MO 


w d W\ A 'dkAu*\ V\ VpjK.V, 
IE AiWKOBKEVfEl 
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j!\M III v L WdkK \UuN ro\!R*H MUvKiM.V 
IFAPPROPRIATiq 


b, Are subseois of hdOnuaboo from whom do. 
provided a written Privacy .Ac; (e)(3) otatemem (euh 

N ' Ido pioawsas ^si: sired O'-ooik^nb Pi f t mdoeDp implement 
tbe necessary farm(s).j 

x ' bknuO air I-Hijo |Uoci "£ N,v.r 'isu',iJM,slKiK ium >meh 
inforumtioa from Abe information subjects 


Brnsist! (SecDi? 

NO If no, indicate reason; if €304 0 pending, provide sntkdpated 
completion date; 

YDS If yes, provide date of lass €30% eertifkadoo/re-eertdksAleo: 


Dor's Know; 


.X.NO .Don't know YDS if yes, please 

provide she dike end noose or title 
of the OMB .submission; 

9, N this o national security system (as determined by the SecD)? 

.X.NO ..YDS .Don't know 


i Cl Suit us of System/ Project: 

' ' v ,, U rui t \eYi ,0 S > k, 

STOP; The FT A. is non complete and after division appruvaks) should be 
m 'mono f >!Ow hi i U>, ,» . uSI *>„ am oil* t.' r„A> m If 
PIN aod.'tr <nber aetbmN ore repaired.] 


930 IDO C^li'k \HOY.f U\ DON MXkkl\€V 

It \MWKUU! 


N codecs: 
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GLASS I PIED EY EtSICC-' G 32W33B91 

EZAF3L.': 1.4 (C.i 

DEC LAS SIFY OY . 11 - 0 5 ■■■ 2 0 3 9 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 



FBI DIVISION INTERMEDIATE APPROVALS 

I Program Division: Critical Incident Response Group (CIRG) I FBIHQDivi 


Program Manager Signature:/' 

(or other appropriate executive Date signed: 

as Division determines) Mame- I”” 


Name: | | 

Title: Render Safe Program Manager 

Signature:/s 
Date signed: 

Name:] ] 

Title: SSA/CDC/Privacy Officer, CIRG 
■ward signed hard copy plus electronic top y tc 


Signature: /s 
Date signed: 

Name: Clifford C. Holly 

Title:Section Chief, Hazardous Devices Operations 
Section (HDOS) 


py to FBI OGC/PCLU (jEH 7338). 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 

PIA required: _X_No _Yes: 

Applicable SORN(s): 

Notify FBI RMD/RIDS per MIOG 190.2.3: _No _Yes 

Consult with RMD to identify/resolve any Federal records/electronic records 
Prepare/revise/add Privacy Act (e)(3) statements for related forms? _N 



David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: /s 

Date Signed: 9/29/2009 
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FBI PRIVACY THRESHOLD ANA LYSIS (PTA) 
NAME OL SYSTEM/PROJECT: I 
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Upon final FB! approval, FBI OGC/PCLU wiil distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DO] Office of Privacy and Civil Liberties (via e-mail to privacy'® usdoi.gov) 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940,20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn | j _ 

1 - FBI SecD/AU (electronic copy: via e-mail to Uc|^_| 

1 - RMD/RMAU (attn | | 

2 - Program Division POC /Privacy Officer 
2 - FBIHQDivision POC/Privacy Officer 


1 -OGC\PCLU intranet 
1 - PCLU UC 

1 - PCLU Library b6 

1 - PCLU Tickler b7< 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM/PROJECT: I 


INFO RMATIONABOUTTHE SYSTEM / P ROJ ECT 


Name of the system/project. Provide current name, any previous or anticipated name changes, and 


Briefly describe the system's/project's structure (including identification of any components/subsyst 




foes the system/project collect, maintain, or disseminate any information about individuals in identifiable form, i.e., is informatioi 
to or linkable to specific individuals (which is the definition of personally identifiable information (Pll))? 


Stop. The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU 
forfinal FBI approval. Unless you are otherwise advised, no PIAis required. 


is of accessing the system/project and transmitting information to and from the system/projec 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OL SYSTEM/PROJECT: | 
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b. Describe who within the FBI will have access to the information in the system and the controls for ensuring that only 
authorized persons can access the information: 

c. Describe who outside the FBI will have access to the information in the system/project and the controls for ensuring that 
onl)/ authorized persons can access the information: 

7. Does the system/project pertain onl)/ to government employees, contractors, or consultants? 

_NO 

_YES. If yes, provide a brief explanation of the quantity and type of information: 

8. Is information about United States citizens or lawfull)/ admitted permanent resident aliens retrieved from the system/project b)/ name 
or other personal identifier? 

_ NO _ YES 

9. Are Social Security Numbers collected, maintained or disseminated from thes)/stem/project? 

_ NO 

_ YES. If yes, for systems/projects other than those supporting law enforcement or intelligence activities: 

- What is the purpose for the collection, maintenance or dissemination of SSNs? 

- Is it feasible to eliminate SSNs from the system/project (please indicate why or why not)? 

- In light of Federal polity to reduce the use of SSNs, is it feasible to minimize system/project-user access to 
SSNs in the system/project (why orwhy not)? 

10. Does the system/project collect any information directly from the person who is the subject of the information? 

_NO 

_YES. If yes, for systems/projects other than those relating to criminal investigations, CT, or Cl: 

- Indicate how such information is collected: 

- Identify by name and form number any forms used to request such information from the information 
subject (this includes paper or electronic forms): 

- Are information subjects from whom information is directly collected provided a written Privacy Act (e)(3) 

statement (either on the collection form or via a separate notice)? _Yes _No 


'Hr'''' 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

"IZZ 


NAME OL SYSTEM / PROJECT: 


b7E 


11. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_ NO. If no, please indicate reason; if C&A is pending, provide anticipated completion date: 

_ YES. If yes, please: 

- Provide date of last C&A certification/re-certification: 

_ Don't Know 

12. Is this system/project the subject of an OMB-300 budget submission? 

_ NO _Don't know 

_ YES. If yes, if the name of the OMB 300 is not the same as the name of the system/project, please provide OMB 

name: 

13. Is this a national security system (as determined by the SecD)? 

_NO _YES _Don't know 

14. Status of System/ Project: 

_ This is a new system/project in development. [Stop. The PTA is now complete and after division approval(s) 

should be submitted to FBI OGC/PCLU for final FBI approval and determination if PIA and/or other actions are 
required .] 

_ This is an existing system/project. [Continue to Section II.] 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 

_ NO. If no, proceed to next question (11.3). 

_ YES. lfyes,indicatewhichofthefollowingchangeswereinvolved (mark all boxes that apply): 
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FBI PRIVACY THRESHOLD ANA LYSIS (PTA) _ 

NAME OL SYSTEM/PROJECT: | ~| b7E 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiable to a format that is identifiable to 

particular individuals. 

_ A new use of an IT system/project, including application of a new technology, that changes how information 

in identifiable form is managed. (For example, a change that would create a more open environment 

and/or avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being merged, centralized, or matched with other 

databases. 

_ A new method of authenticating the use of and access to information in identifiable form by members of the 

public. 

_ A systematic incorporation of databases of information in identifiable form purchased or obtained from 

commercial or public sources. 

_ A new interagency use or shared agency function that results in new uses or exchanges of information in 

identifiable form. 

_ A change that results in a new use or disclosure of information in identifiable form. 

_ A change that results in new items of information in identifiable form being added into the system/project. 

_ Changes do not involve a change in the lype of records maintained, the individuals on whom records are 

maintained, or the use or dissemination of information from the system/project. 

_ Other. [Please provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

_NO 

_YES. Ifyes, please provide date/title of the PIA: 



The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU for final FBI approval and 
determination if PIA and/or other actions are required . 
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